Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AdVo-55fgvT8pw7T_59Uy_xn5_0.roa
File: AdVo-55fgvT8pw7T_59Uy_xn5_0.roa (raw, json)
Hash identifier: 9fjojyvqVM0eD0NxCqTBOYkL//rT8ZuCCymaVRBbp8w=
Subject key identifier: 01:D5:68:FB:9E:5F:82:F4:FC:A7:0E:D3:FF:9F:54:CB:FC:67:E7:FD
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018891C9A7FC913BFAEC4BA3441FDC36199F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AdVo-55fgvT8pw7T_59Uy_xn5_0.roa
Signing time: Tue 06 Jun 2023 17:38:12 +0000
ROA not before: Tue 06 Jun 2023 17:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:c9:a7:fc:91:3b:fa:ec:4b:a3:44:1f:dc:36:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 6 17:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d568fb9e5f82f4fca70ed3ff9f54cbfc67e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:ec:35:e0:83:a2:68:d1:7c:e2:cc:44:ae:
4b:50:1d:80:04:47:c9:c4:d3:0b:ad:7b:5f:3d:97:
0a:6c:a4:86:d0:86:dd:0f:06:02:b8:d7:02:ff:49:
15:e0:d2:fa:b7:b1:72:f9:9d:ff:10:84:25:bd:5a:
3f:9c:23:41:f8:24:f8:8b:fe:fc:6a:1f:1f:a5:16:
47:5b:14:28:c4:6c:d5:8b:fc:32:44:53:04:88:76:
8a:1b:70:94:e0:ea:9d:16:c0:fe:ce:85:a3:cb:a7:
63:b0:0e:75:91:8e:26:09:10:08:6c:31:e7:27:25:
ff:16:00:21:3f:09:38:2d:bb:a1:bc:80:59:7c:33:
83:05:62:ae:c9:d7:c7:6c:ef:8f:a8:aa:05:09:6f:
fa:c4:1e:ef:05:4a:4e:e2:8c:97:c5:b9:f7:a1:e4:
73:48:df:ec:18:9d:1a:17:ad:76:51:5b:14:e7:20:
2c:9f:de:2b:fb:9c:04:fa:dd:17:69:13:d8:db:32:
ad:42:71:f3:70:08:95:1e:2d:30:bc:7f:5d:59:cc:
ce:10:1a:49:24:21:47:ca:b2:1f:b8:5a:86:7c:92:
29:35:3c:fc:f1:98:9c:07:bf:67:f7:98:28:81:e8:
27:c7:81:d6:59:59:4e:29:f1:9a:66:72:8e:d6:74:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:68:FB:9E:5F:82:F4:FC:A7:0E:D3:FF:9F:54:CB:FC:67:E7:FD
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AdVo-55fgvT8pw7T_59Uy_xn5_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d6:75:41:7b:54:a3:ae:62:da:0d:de:02:e1:e2:b4:ea:fa:
59:1a:f0:0a:e3:77:c6:e9:1e:66:aa:bf:cd:34:a8:5b:b4:8c:
cf:40:dc:64:01:ad:4d:73:03:7a:a9:58:b1:d9:ad:53:1d:c5:
9f:80:d3:9b:ac:2a:99:26:9c:e5:5f:06:f9:45:f6:74:21:1c:
21:91:c6:5b:37:95:14:d9:f3:3d:35:9a:0e:f6:bc:8d:47:12:
3e:37:f7:94:94:6a:01:a3:50:a4:b0:cc:19:32:d0:16:2f:a9:
7d:40:db:be:7c:1c:e1:a7:1e:ab:d3:3d:c0:25:90:10:f4:12:
de:f1:26:18:9c:ff:45:75:3e:40:51:e5:97:91:01:b1:10:ac:
70:c7:b3:19:6f:1c:76:d6:c0:7c:62:0a:f0:15:18:c7:aa:e5:
fe:db:f4:87:00:9b:c3:e8:e5:73:6d:5a:62:8f:c2:d8:fc:a4:
35:e8:5f:30:b8:74:dd:ca:32:74:eb:e2:7c:00:a4:7f:7b:93:
15:a0:f6:28:93:f2:b9:38:5e:46:71:aa:d7:4e:13:41:8f:fe:
76:79:e9:aa:64:fe:d5:bd:91:b1:76:b8:d9:3c:40:b9:13:b9:
35:63:fb:46:21:9d:c5:c9:e3:16:4f:0d:13:a4:52:d8:cf:d9:
ff:fd:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org